Beruflich Dokumente
Kultur Dokumente
20130305
appinitdlls v.20130305
(Software) Gets contents of AppInit_DLLs value
AppInit_DLLs
----------------------------------------
apppaths v.20120524
(Software) Gets content of App Paths key
----------------------------------------
assoc v.20080815
(Software) Get list of file ext associations
----------------------------------------
banner v.20081119
(Software) Get HKLM\SOFTWARE.. Logon Banner Values
----------------------------------------
bho v.20080418
(Software) Gets Browser Helper Objects from Software hive
----------------------------------------
bitbucket v.20080418
(Software) Get HKLM\..\BitBucket keys\values
----------------------------------------
clsid v.20100227
(Software) Get list of CLSID/registered classes
----------------------------------------
cmd_shell v.20100830
(Software) Gets shell open cmds for various file types
----------------------------------------
codeid v.20100608
(Software) Gets CodeIdentifier DefaultLevel value
----------------------------------------
ctrlpnl v.20100116
(Software) Get Control Panel info from Software hive
----------------------------------------
defbrowser v.20091116
(Software) Gets default browser setting from HKLM
----------------------------------------
Launching direct v.20120513
----------------------------------------
disablesr v.20120914
(Software) Gets the value that turns System Restore either on or off
----------------------------------------
drwatson v.20081219
(Software) Gets Dr. Watson settings from Software hive
----------------------------------------
----------------------------------------
ie_version v.20091016
(Software) Get IE version and build
----------------------------------------
imagefile v.20100824
(Software) Checks IFEO subkeys for Debugger/CWDIllegalInDllSearch values
----------------------------------------
init_dlls v.20110309
(Software) Check for odd **pInit_Dlls keys
----------------------------------------
installedcomp v.20100116
(Software) Get info about Installed Components/StubPath
----------------------------------------
Launching installer v.20120917
(Software) Determines product install information
----------------------------------------
kb950582 v.20081212
(Software) KB950582 - Gets autorun settings from HKLM hive
----------------------------------------
----------------------------------------
macaddr v.20090118
(Software) --
----------------------------------------
msis v.20090911
(Software) Determine MSI packages installed on the system
----------------------------------------
networkcards v.20080325
(Software) Get NetworkCards
----------------------------------------
Launching networklist v.20120917
(Software) Collects network info from Vista+ NetworkList key
----------------------------------------
networkuid v.20100312
(Software) Gets Network key UID value
----------------------------------------
notify v.20110309
(Software) Get Notify subkey entries
----------------------------------------
product v.20100325
(Software) Get installed product info
----------------------------------------
profilelist v.20100219
(Software) Get content of ProfileList key
----------------------------------------
regback v.20100219
(Software) List all tasks along with logfile name and last written date/time
----------------------------------------
removdev v.200800611
(Software) Parses Windows Portable Devices key (Vista)
----------------------------------------
renocide v.20110309
(Software) Check for Renocide malware
----------------------------------------
schedagent v.20100817
(Software) Get SchedulingAgent key contents
----------------------------------------
secctr v.20100310
(Software) Get data from Security Center key
----------------------------------------
sfc v.20100305
(Software) Get SFC values
----------------------------------------
shellexec v.20081229
(Software) Gets ShellExecuteHooks from Software hive
----------------------------------------
shellext v.20100515
(Software) Gets Shell Extensions from Software hive
----------------------------------------
shelloverlay v.20100308
(Software) Gets ShellIconOverlayIdentifiers values
----------------------------------------
snapshot v.20080725
(Software) Check ActiveX comp kill bit; Access Snapshot
----------------------------------------
soft_run v.20130329
(Software) [Autostart] Get autostart key contents from Software hive
----------------------------------------
specaccts v.20120803
(Software) Gets contents of SpecialAccounts\UserList key
----------------------------------------
spp_clients v.20120914
(Software) Determines volumes monitored by VSS
----------------------------------------
sql_lastconnect v.20090112
(Software) MDAC cache of successful connections
----------------------------------------
ssid v.20100301
(Software) Get WZCSVC SSID Info
----------------------------------------
startmenuinternetapps_lm v.20101219
(SOFTWARE) Start Menu Internet Applications info
----------------------------------------
svchost v.20100322
(Software) Get entries from SvcHost key
----------------------------------------
taskman v.20091116
(Software) Gets Taskman from HKLM\..\Winlogon
----------------------------------------
Launching tracing v.20120509
----------------------------------------
uninstall v.20120523
(Software) Gets contents of Uninstall keys (64- & 32-bit) from Software hive
----------------------------------------
urlzone v.20090526
(Software) URLZONE detection
----------------------------------------
uac v.20130213
(Software) Get Select User Account Control (UAC) Values from
HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem
----------------------------------------
userinit v.20080328
(Software) Gets UserInit value
----------------------------------------
virut v.20090218
(Software) Detect Virut artifacts
----------------------------------------
vista_wireless v.20090514
(Software) Get Vista Wireless Info
----------------------------------------
win_cv v.20090312
(Software) Get & display the contents of the Windows\CurrentVersion key
----------------------------------------
winbackup v.20120812
(Software) Get Windows Backup
----------------------------------------
winlogon v.20100219
(Software) Get values from the WinLogon key
----------------------------------------
winnt_cv v.20080609
(Software) Get & display the contents of the Windows NT\CurrentVersion key
----------------------------------------
winver v.20081210
(Software) Get Windows version
----------------------------------------
yahoo_lm v.20101219
(SOFTWARE) Yahoo Messenger parser
----------------------------------------